Information Systems Security Officer

About the role

The Information System Security Officer (ISSO) is responsible for ensuring the appropriate operational security posture for information systems. This role requires detailed knowledge and expertise in managing the security aspects of an information system and involves working closely with the ISSM, CPSO, and FSO.

Responsibilities

• Implementation of the requirements of Risk Management Framework, including the Joint Special Access Program (SAP) Implementation Guide (JSIG), NIST 800-53, or other security requirements as assigned.
• Develop and update the security authorization package, manage and control changes to the system, and assess the security impact of those changes.
• Ensure systems are operated, maintained, and disposed of following security policies and procedures as outlined in the security authorization package.
• Report all security-related incidents to the ISSM.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Maintain and establish the accreditation of classified information systems.
• Establish and implement security procedures and practices in support of Corporate goals and current DoD Regulations.
• Ensure all security procedures are being followed such as patching, AV updates, continuous monitoring, trainings, and self-inspections.
• Develop, implement and maintain security emergency action plans.
• Provide security education and training to local employees.
• Maintain administrative security records and documents for local employees.
• Conduct self-inspections to ensure current security measures and policies are effective.
• Conduct random security inspections to ensure regulations and procedures are being adhered to by local employees.
• Conduct system audits in accordance with security accreditation package requirements.
• Conduct vulnerability scans and analysis.
• Perform software upgrades on networks, systems, and hardware.
• Perform security assignments in accordance with the Automated Information System requirements and local regulations.
• Understand and follow NISPOM/ODAA/RMF/JAFAN/ICD/NIST/JSIG classified system accreditation and certification requirements.

Requirements

• Bachelor’s degree in related field or four (4) years’ experience in related field.
• DoD 8570 compliant, IAT Level II.
• Experience with Windows based administration of Information Systems.
• Strong experience in networking, active directory, centralized logging solutions, vulnerability scanning and anti-virus solutions.
• Strong communication and problem-solving skills.
• Able to work in both a team environment as well as independently.
• Ability to obtain and maintain Top Secret clearance with the ability to obtain approval for SAP/SCI access.

Desirable

• Previous experience with DoD Security Regulations and Policies.

Perks

• Advancement based on performance, competitive wages, valuable benefits and a great working environment.
• Medical/Vision/Prescription/Dental Benefits.
• Life, AD&D and Long Term Disability Coverage.
• Paid Holidays, Military Leave, and Paid Time Off.
• 401k Plan with eligibility from first day of employment.
• Education reimbursement for job-related courses for full-time employees.
• PriceClub/COSTCO/Sam's Club annual membership.